Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e2e901-4c51-4563-b76c-ff259bfc6778/1/RFVxH7AI5HtM42z2O5avIbxoDlI.mft
File:                     RFVxH7AI5HtM42z2O5avIbxoDlI.mft (raw, json)
Hash identifier:          7H+uvWsfJzcoqC0ET7emzfLXpcrtGS3O5R0AvyrZXOk=
Subject key identifier:   3E:09:79:F9:0D:A0:90:30:C3:7D:8C:E4:5E:3E:D0:A6:52:2E:65:9F
Authority key identifier: 44:55:71:1F:B0:08:E4:7B:4C:E3:6C:F6:3B:96:AF:21:BC:68:0E:52
Certificate issuer:       /CN=4455711fb008e47b4ce36cf63b96af21bc680e52
Certificate serial:       018CB505F77C264601B9AC5E04F1E76872BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFVxH7AI5HtM42z2O5avIbxoDlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e2e901-4c51-4563-b76c-ff259bfc6778/1/RFVxH7AI5HtM42z2O5avIbxoDlI.mft
Manifest number:          0840
Signing time:             Fri 29 Dec 2023 10:01:56 +0000
Manifest this update:     Fri 29 Dec 2023 10:01:56 +0000
Manifest next update:     Sat 30 Dec 2023 10:01:56 +0000
Files and hashes:         1: RFVxH7AI5HtM42z2O5avIbxoDlI.crl (hash: 1KE3bLCjJ2pk5W1Q/J7wlCNmFds/cOe/qY0aZx1WxIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b5:05:f7:7c:26:46:01:b9:ac:5e:04:f1:e7:68:72:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4455711fb008e47b4ce36cf63b96af21bc680e52
        Validity
            Not Before: Dec 29 10:01:56 2023 GMT
            Not After : Dec 30 10:01:56 2023 GMT
        Subject: CN=3e0979f90da09030c37d8ce45e3ed0a6522e659f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2b:5b:53:02:ad:e4:14:3b:7c:e2:9f:49:af:
                    2b:9b:6d:7e:87:47:95:29:bb:57:a1:db:30:46:5d:
                    06:74:02:69:f5:04:23:2c:ae:1a:12:fe:22:5e:5f:
                    40:e4:c8:9c:6d:d7:bc:0f:04:91:f2:92:e3:5b:94:
                    10:ed:bc:51:7f:54:e0:f6:5f:28:ef:a2:dd:a1:46:
                    f2:26:5f:36:3f:4f:3c:5f:60:60:0a:3f:c8:de:5b:
                    8f:55:7a:44:d4:22:70:50:d9:6a:4c:b1:2d:e1:af:
                    72:55:8b:b8:c2:07:39:00:b8:a0:ba:ce:16:0e:ba:
                    5f:5d:4a:93:ff:62:ff:7c:5d:55:7c:2f:99:d2:72:
                    99:6c:51:e8:40:9e:6b:ad:89:2b:fe:c0:7e:dc:b5:
                    2d:69:3d:b6:ca:d2:99:b9:bc:63:ec:12:2b:eb:04:
                    c1:f5:b2:44:8b:2e:ce:f1:5f:3f:e9:8a:e2:1b:24:
                    91:17:9e:3a:8b:91:2e:88:a4:9c:77:20:c3:3e:87:
                    09:8f:df:90:7f:9f:0b:9c:33:4b:8f:60:b7:33:37:
                    39:03:00:db:2c:71:0d:55:05:0b:f8:ed:15:d9:af:
                    9d:4f:82:d7:75:3a:05:71:f4:1d:89:30:bf:8b:88:
                    a9:0d:a8:35:7a:56:e3:dc:68:cf:68:77:b2:53:7a:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:09:79:F9:0D:A0:90:30:C3:7D:8C:E4:5E:3E:D0:A6:52:2E:65:9F
            X509v3 Authority Key Identifier:
                keyid:44:55:71:1F:B0:08:E4:7B:4C:E3:6C:F6:3B:96:AF:21:BC:68:0E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFVxH7AI5HtM42z2O5avIbxoDlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e2e901-4c51-4563-b76c-ff259bfc6778/1/RFVxH7AI5HtM42z2O5avIbxoDlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e2e901-4c51-4563-b76c-ff259bfc6778/1/RFVxH7AI5HtM42z2O5avIbxoDlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6e:fa:97:0b:f3:5c:71:8a:c0:fa:fc:99:bd:6a:a5:8b:a4:
         20:c6:c2:b2:12:1e:63:21:ef:94:01:3b:d0:8e:24:8d:5c:d8:
         14:c1:1e:3c:fc:47:4b:93:a0:cb:e6:29:fa:89:0d:51:71:4b:
         1c:ab:0f:28:1a:5b:f2:5c:7b:70:2a:81:91:8e:65:6a:11:f3:
         ed:ed:b1:df:14:b1:a0:10:c2:e2:12:af:d0:a9:80:6f:8e:a6:
         62:21:55:ee:9d:e4:da:c7:76:83:73:d8:b0:8c:c1:45:8f:2e:
         11:30:09:c6:84:39:ab:4a:ed:15:03:35:eb:b6:20:53:c8:99:
         d6:51:c5:7a:11:2f:32:aa:ea:1b:22:05:97:c8:48:49:1d:6d:
         77:5f:0f:16:c8:64:58:c2:b8:0d:5f:c7:03:2f:4e:a4:ea:ee:
         cc:6f:fd:93:58:03:a3:cb:91:7e:39:4f:4a:26:70:8c:f3:7d:
         2f:c7:4f:f6:54:1d:96:1b:e5:8f:ea:a9:b5:87:56:54:d2:47:
         81:d2:c7:05:04:32:a3:6c:48:69:2e:e4:82:98:d9:2b:56:8f:
         30:54:6f:70:9e:07:a6:d2:32:9c:d7:1e:9a:4f:9e:34:a7:92:
         5b:3f:85:6e:5a:a6:86:57:04:e0:51:10:9b:12:03:23:e2:88:
         02:c5:c4:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYy1Bfd8JkYBuaxeBPHnaHK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTU3MTFmYjAwOGU0N2I0Y2UzNmNmNjNiOTZhZjIxYmM2
ODBlNTIwHhcNMjMxMjI5MTAwMTU2WhcNMjMxMjMwMTAwMTU2WjAzMTEwLwYDVQQD
EygzZTA5NzlmOTBkYTA5MDMwYzM3ZDhjZTQ1ZTNlZDBhNjUyMmU2NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhStbUwKt5BQ7fOKfSa8rm21+h0eV
KbtXodswRl0GdAJp9QQjLK4aEv4iXl9A5Micbde8DwSR8pLjW5QQ7bxRf1Tg9l8o
76LdoUbyJl82P088X2BgCj/I3luPVXpE1CJwUNlqTLEt4a9yVYu4wgc5ALigus4W
DrpfXUqT/2L/fF1VfC+Z0nKZbFHoQJ5rrYkr/sB+3LUtaT22ytKZubxj7BIr6wTB
9bJEiy7O8V8/6YriGySRF546i5EuiKScdyDDPocJj9+Qf58LnDNLj2C3Mzc5AwDb
LHENVQUL+O0V2a+dT4LXdToFcfQdiTC/i4ipDag1elbj3GjPaHeyU3o0SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4JefkNoJAww32M5F4+0KZSLmWfMB8GA1UdIwQY
MBaAFERVcR+wCOR7TONs9juWryG8aA5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZWeEg3QUk1SHRNNDJ6Mk81YXZJYnhvRGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lMmU5MDEtNGM1MS00NTYzLWI3NmMt
ZmYyNTliZmM2Nzc4LzEvUkZWeEg3QUk1SHRNNDJ6Mk81YXZJYnhvRGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9lMmU5MDEtNGM1MS00NTYzLWI3NmMtZmYyNTliZmM2Nzc4
LzEvUkZWeEg3QUk1SHRNNDJ6Mk81YXZJYnhvRGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW76lwvz
XHGKwPr8mb1qpYukIMbCshIeYyHvlAE70I4kjVzYFMEePPxHS5Ogy+Yp+okNUXFL
HKsPKBpb8lx7cCqBkY5lahHz7e2x3xSxoBDC4hKv0KmAb46mYiFV7p3k2sd2g3PY
sIzBRY8uETAJxoQ5q0rtFQM167YgU8iZ1lHFehEvMqrqGyIFl8hISR1td18PFshk
WMK4DV/HAy9OpOruzG/9k1gDo8uRfjlPSiZwjPN9L8dP9lQdlhvlj+qptYdWVNJH
gdLHBQQyo2xIaS7kgpjZK1aPMFRvcJ4HptIynNcemk+eNKeSWz+FblqmhlcE4FEQ
mxIDI+KIAsXEFg==
-----END CERTIFICATE-----